Verify by file upload

Upload the original file. We compute its SHA-256 fingerprint locally and look up any matching certificate. The file is not stored — we only need its hash.